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Memorandum ‘~~ 


To: SAC, SEATTLE (264A-SE-NEW) Date 7/5/95 


b6 
b7C 


From 


f 


Subject: i UNSUBS; 
Eskimo Nofth Inc., - Victim; 
Hacking - File Destruction f 


n 6/30/95, writer was telephonically advised 7 ere b6 
of Eskimo North, an Interne b7c 


that his 
accounting records destroyed. 

Intrusson occurred around 3:00 pm. eubsecuentiy |. lreceived 

a voide mail, then a phone call in which he talked to the 

hacker(s). tated there were two hackers, male, with 

voices of several females in background. said the hackers 

told him they knocked ESKIMO NORTH off the internet because it 

provides Internet Relay Chat (IRC), a service on the internet 

similar to CB radio. The hackers stated they were unhappy with 


the behavior of several Eskimo North customers that use IRC. Pe 


b7C 


[__|statea that he had implemented most recommended 
security features, but was unable to explain how the hacker(s) 
penetrated his system. He further advised that he was unable to 
restore his computer backups, due to technical difficulties. 

stated that he has over 3,000 accounts and the cost of the 
damage to his accounting system, including lost revenue is 
incalculable. 


Recommend matter be opened and assigned to writer. 


LEAD: At Seattle, obtain detail info from complainant, 
including voice tape, and check logical sources for information 
regarding any hackers that may have targeted Eskimo North. 
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FD-192/FD-192A PAGE at 
July 26, 1995 
TITLE AND CHARACTER OF CASE 


ESKIMO NORTH INC 


DATE PROPERTY ACQUIRED SOURCE FROM WHICH PROPERTY ACQUIRED 
July 05, 1995 be 
b7C 


LOCATION OF PROPERTY: ECR Fee¢( Sh. 200 


ANTICIPATED DISPOSITION ACQUIRING AGENT CASE AGENT 


GRAND JURY MATERIAL - NO (DISSEMINATE ONLY PURSUANT TO RULE 6(E) ) 
DESCRIPTION OF PROPERTY 
BARCODE: E0847599 

~ yictim| | RECORDING OF VOICE MAIL CALE AND VOICE--CALL-TO- - - 


VICTIM 6/30 - 7/1/95 b6é 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 09/26/1997 
To: Seattle 


From: Seattle 


Squad 6 
Contact: SA 206-622-0460 b3 
Ld = 
Approved By: iio 
PP Y b7E 
Drafted By: 
case #: [ ___| (Closed) / 
Title: UNSUB; pot 
Eskimo North Inc. - 
Victim; 
CITAC 
Synopsis: Purpose of this memo is to place captioned matter in a 
closed status. 
Details: On 4/1/96, Assistant United States Attorney[___] b6 
b7C 


declined prosecution of captioned matter based upon the 
fact that no subject has been identified. 


As there is no work to be done in the Seattle Division, 
this matter should be placed in a closed status. 


(Rev 06-04-2007) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 05/19/2008 


To: SEATTLE Attn: EVIDENCE TECHNICIANS 


From: SEATTLE 


SQUAD CY1 b3 
b6 
Approved By: b7c 
b7E 
Case ID #[ (Closea[__ | 


Title: ESKIMO NORTH INC 
Synopsis: Request for disposal of evidence. 


Details: The aforementioned case was closed on 10/05/1997 and 
the evidence held in this case is no longer needed. It is 


requested that the evidence be destroyed by the Evidence Control 
Center. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 7/10 / 95 
ESKIMO b6 
NORTH, and INTERNET provider, was interviewed telephonically fol- bic 


lowing his telephone call to the Seattle Office of the FEDERAL 
BUREAU OF INVESTIGATION. 


advised that on the afternoon of June 30, 1995, BE 
his business was hacked into and all accounting records were Bie 
destroyed. He advised he had information that the hacker came in 
from an INTERNET site at BADLANDS.NODAK.EDU. He stated he subse- 
quently received a voice mail message and then a telephone call 
from an individual claiming to be the hacker and stating he 
hacked into his system as revenge because ESKIMO NORTH provides 
INTERNET RELAY CHAT (IRC) services and that several of his custo- 
mers were disliked on the IRC by the hacker. [stated his 
service, ESKIMO NORTH, has approximately 3,000 customers and the 
hacker destroyed all accounting records and the estimated cost to 
repair and reconstruct the data would be enormous. 


stated the hacker in the telephone call to him b6 
stated that if ESKIMO NORTH continued_to provide IRC services, bic 
they would be hacked into again. stated the first tele- 
phone call to his voice mail was recorded on tape and he has that 
tape for review. Regarding the second telephone call in which he 
talked to the hacker, he thought there were two additional people 
in the conversation, plus he thought he heard some female voices 
giggling in the background. He stated the hacker taunted him, 
stating how easy it was to hack into his system. 


b6 
b7¢ 


stated his service has utilized most known secur- 
ity measures to prevent such an action and he is at a lost to 
ex in how the hacker could have done damage to his system. 
[Po |eurther stated he utilizes backup procedures, however, due 
o some unexplained technical problem, he is unable to restore 
his backups to reconstruct his system. 


(telephonically) 
Investigation on 6/30/95 a Seattle, Washington Fle# 264A-SE-74072 —— ya 


b6 
b7c 
by SA Date dictated 7 [ 5 [ 95 


This document contains neither recommendations nor conclusions of the FBI It 1s the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency 
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264A-SE-74072 


b6 
Continuation of FD-302 of es eee On _ 6/30/95 Page en b7c 


[____|statea his system as a security measure utilizes 
a "TCP wrapper" which determines where an incoming INTERNET 
transmission originates. He stated the hacker originated from a 
site at an INTERNET address of BADLANDS.NODAK.EDU. He stated 
that a telephone call inquiry found out that the account for that 
institution was originating from a location in Calgary, Canada. 


264A-SE-74072 1 
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On July provided the following 
information to SA 
AT SEATTLE, WASHINGTON 
b6 
b7C 
b7D 


further advised that the 
was extremel opular in the 


acker convention 


and the interviewing Agent may possibly 
obtain additional information from the Las Vegas Office of the 


FEDERAL BUREAU OF INVESTIGATION. tee 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: Routine Date: 10/03/1996 
Tos Seattle Attn: 
From: Seattle 
Squad 4 
Contact: sa[__—i|:: 206-622-0460 b3 
b6 
Approved By: b7c 
b7E 
Drafted By: 
Case ID #: Pending 
Title: UNSUB; 
ESKIMO NORTH INC. - 
VICTIM; 
CITAC 
Synopsis: Initial 
Administrative: te 
— b6 
Details: b7C 
Character: 
CFA-IOS 
CFA-DIS 
Assisting Joint Agencies? No 
International? No 
Are Organized Groups Involved? No 
Public Officials Subjects? No 
id 
Sunt GE q %O1 EET 2 posure’ no cents) : 
b3 
b6 
b7C 


Narrative: b7E 


j 


Unknown, unidentified hacker caused damage to local 
internet provider. 


AUSA Opinion: 
AUSA declined. Case to be closed. 
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CHAIN - OF - CUSTODY 


DATE TIME 
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REASON: COLL 


RECEIVED BY: 


REASON: Ws /95- 7 ys 


RECEIVED BY: M-22Z-79 ZI4AS 


REASON: age Pea 
RECEIVED BY: 9-23-66 [7-004 
REASON: hee treg Perinck G 
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